Analysis
-
max time kernel
153s -
max time network
158s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
23-05-2024 01:25
General
-
Target
RFQ_4183321000004562E20000.exe
-
Size
150.0MB
-
MD5
379450e55ebb28dfdab7e41b314325c4
-
SHA1
cdf9ff655925aa8fbd8b8f98285374ae1c122971
-
SHA256
bf6597b26b2649f2850ba9daa3ee4fbd2d46cbb3ded37cb659137eb5f37893b8
-
SHA512
dc5bf8483462a638d004240856d65d53b0b79779e6a9b1d05266c06ae1969f422b32a9b73f8daad38ca9ef99226caaa56526c19f708d3edff727e302c47892db
-
SSDEEP
6144:S2MApbs63Hn2Y594nAqkXJWgPZhZ1L5NGikZF3NjhpH3565Xnnzf0sv4jctw:Zbx4nByJ7PvZ5DwN
Score
9/10
Malware Config
Signatures
-
Detects executables packed with SmartAssembly 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RFQ_4183321000004562E20000.exe"C:\Users\Admin\AppData\Local\Temp\RFQ_4183321000004562E20000.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
480KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB